Limited access to manage profiles

It would be useful to have an option in the RBAC role definition to give first line helpdesk users limited access to user profiles

There is an option to add Storage > Azure files > Managed profiles 
But this does not give helpdesk users the needed tools 
On the one hand they have too much access (they don't need the opportunity to unlink shares or reconfigure autoscaling)
And on the other hand they have too little access (they are missing the option to close file handles)

Would be great if there was an option to only add access for closing file handles and delete/restore profiles